CVE-2024-9687
Authorization Bypass Through User-Controlled Key (CWE-639)
Summary
The WP 2FA with Telegram plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0. This is due to insufficient validation of the user-controlled key on the 'validate_tg' action. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to log in as any existing user on the site, such as an administrator.
Impact
This vulnerability allows authenticated attackers with subscriber-level permissions or higher to bypass authentication and log in as any existing user on the site, including administrators. This could lead to complete compromise of the WordPress site, allowing attackers to access sensitive information, modify site content, install malicious plugins, or perform any action available to high-privileged users.
Exploitation
There is no evidence that a public proof-of-concept exists. There is no evidence of proof of exploitation at the moment.
Patch
A patch is not explicitly mentioned in the provided information. However, since the vulnerability affects versions up to and including 3.0 of the WP 2FA with Telegram plugin, it's likely that an update beyond version 3.0 would include a fix for this vulnerability.
Mitigation
1. Update the WP 2FA with Telegram plugin to a version newer than 3.0 if available. 2. If an update is not available, consider disabling or removing the WP 2FA with Telegram plugin until a patch is released. 3. Implement strong access controls and regularly audit user permissions to minimize the risk of exploitation. 4. Monitor WordPress admin activities closely for any suspicious actions. 5. Implement additional security measures such as Web Application Firewalls (WAF) to help detect and prevent potential exploitation attempts.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
Feedly found the first article mentioning CVE-2024-9687. See article
Feedly estimated the CVSS score as MEDIUM
NVD published the first details for CVE-2024-9687
A CVSS base score of 8.8 has been assigned.
Feedly estimated the CVSS score as HIGH
Detection for the vulnerability has been added to Qualys (152305)
EPSS Score was set to: 0.05% (Percentile: 20.1%)